@awiki/dsh-model-proxy
经 AWiki 认证的模型代理和 DeepSeek Harness 的快速充值界面
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @awiki/dsh-model-proxy@0.1.7Model Proxy 以 @awiki/dsh-model-proxy 发布，当前版本为 0.1.7。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Optional AWiki-authenticated model provider and Quick Recharge UI for DeepSeek Harness.
Install @awiki/dsh-plugin first, then add this package to the same DSH profile:
dsh plugin --profile web add @awiki/dsh-plugin@latest
dsh plugin --profile web add @awiki/dsh-model-proxy@latest
The package contributes the awiki-model-proxy Host runtime and the Browser
surfaces that belong to it: model onboarding plus Settings → Quick Recharge,
whose Account & Recharge and Usage tabs own model opt-in, recharge, and usage.
It uses the public @awiki/dsh-plugin/model-proxy-contract and the shared AWiki
Browser identity bridge; it does not copy the AWiki service, RPC contract, or
session model. Its bundle patch explicitly injects the already loaded awiki
service.
The provider is disabled until a local user explicitly enables it. Short-lived model tokens stay in the Host. The Browser receives only the public account, usage, and recharge projections defined by the main AWiki package. The UI also states that hosted models come from the official DeepSeek API and follow DeepSeek's official pricing.
Before registering its adapter, exposing its directory entry, or issuing a
short-lived token, the Host authenticates the current DID through
ctx.awiki.externalHttpAuth and posts the strict empty JSON object {} to the
Model Proxy's existing /api/identity-recovery endpoint. The actual public
response is an exact outcome-only object: restored, already_current, or
not_applicable opens the matching current-generation gate. Any extra field,
unknown outcome, or manual/permanent rejection keeps the adapter suspended;
one 503 is retried. Transition assurance remains a Model server-side
operation/audit invariant and is verified by the Model/System DB oracle, not
inferred from this public response. Session
generation changes, sign-out, unload, and late completions clear the token and
cannot reopen an older identity. No User Service recovery credential,
operation ID, DID path, proof, assurance, or ledger owner is sent in the request
or exposed to Browser state.
Account output is bound to the current session DID, while usage and recharge
outputs reject canonical DID, stable-subject, path, or proof fields instead of
forwarding private Model storage ownership to Browser RPC.
Upstream JSON and response text never become Browser error copy. The Host maps
known recharge races to closed endpoint outcome codes and all other failures to
fixed RPC codes/messages; the Browser branches only on those codes and renders
its own fixed safe text.
The Host runtime previously exported as @awiki/dsh-plugin/model-proxy is now
this package's root export:
import * as modelProxy from '@awiki/dsh-model-proxy'
The browser-safe RPC contract remains available from
@awiki/dsh-plugin/model-proxy-contract. Installing only
@awiki/dsh-plugin no longer inserts or loads any model proxy Host or Browser
surface. Existing model proxy configuration variables keep their names:
server-info capability.DSH_AWIKI_MODEL_CONTEXT_WINDOWDSH_AWIKI_MODEL_MAX_TOKENSDSH_AWIKI_MODEL_TOKEN_REFRESH_SKEW_SECONDSIn normal production profiles the active tenant publishes the Model Proxy URL through
server-info.services.model_proxy. There is no fixed production fallback or global URL override
(DSH_AWIKI_MODEL_PROXY_URL is not read). Test-only loopback HTTP is accepted only for that
advertised Model Proxy field when the Host testing flag is on.
Tenant switching releases the old adapter, provider directory, recovery target, and token cache
before binding the new capability; model intent and the non-AWiki fallback selection are stored
independently for each tenant. Startup reads the active tenant identity from the Host catalog,
which is available before the asynchronous native Identity provider. Model capability remains
unavailable until the existing capability discovery completes; no endpoint or token is guessed.
This package targets the DeepSeek Harness 0.1.5-rc.1 package family and
requires @awiki/dsh-plugin@^0.3.9 as a peer dependency. It retains the shared
awikiClient Browser bridge and the independently loaded Model Proxy runtime.